hello all,I am tracking the function calls of CreateSymbolicLink API using ProcMonitor...I noticed that createsymbolic calls zwcreatefile API and querystandardinformationfile.I confirmed that Zwcreatefile is only responsible for creating the file,but am
not sure wether linking the target path is done by querystandardinformationfile.What does the function querystandardinformationfile do??can anybody help me with this?
Based on my understanding, to create a link, we need to know the information of the linked object at first and then create a link file. I think querystandardinformationfile is used to get the information of the linked object(a file or a directory, directory
can be considered as a special file).
Please mark the replies as answers if they help and unmark if they don't. This can be beneficial to other community members reading the thread.